$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa File: 0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa (raw, json) Hash identifier: U1bUwrIz3i8blLXWdDrIqYsVNc//XOPe3xfBgs80exc= Subject key identifier: 1B:E8:21:10:72:59:F7:41:7E:04:87:2E:4B:2F:A0:03:0E:34:C8:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB6DAB7CA2EB72362C640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b6:da:b7:ca:2e:b7:23:62:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=112bbb62-5867-4a9c-a3eb-ff58f1e11b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0d:77:cd:58:e0:68:7c:0c:d1:6c:8c:bf:72: 03:fa:16:d4:a5:e1:6d:14:41:c3:a7:6a:07:53:e5: d2:dc:6e:69:5a:1e:59:8b:a7:92:09:88:ff:10:b7: 5e:d8:b0:fa:1e:f6:70:74:ae:b0:3f:a4:12:6f:36: 60:e0:1c:4b:e6:5b:b9:a8:4c:41:1c:d8:39:b0:6b: e4:db:79:99:c9:ec:ea:d6:2a:8f:2d:73:f7:c3:c4: 7b:ec:42:2e:70:15:91:11:4b:f2:d6:d0:90:32:cb: 56:aa:c3:bd:b9:8b:0a:d6:91:18:c8:63:18:14:3e: 70:12:e7:1b:fb:9d:0d:17:ed:53:5d:d0:17:28:88: 36:a2:c2:ee:42:c8:d2:78:85:2f:26:07:60:06:83: bd:23:7c:d2:31:4f:32:4d:0b:7e:92:6b:11:f8:cb: 25:92:44:d0:df:77:8c:fd:1c:bc:36:85:bc:20:b5: 4e:d0:28:c2:ab:79:c4:0c:1d:ca:b8:0f:13:db:19: 84:eb:a6:9c:3f:8e:7b:35:7a:b7:c2:3f:8a:f2:76: 0d:36:d9:33:f3:f4:65:4e:32:f6:1c:27:7c:ab:38: 90:5f:7c:c6:c9:85:0b:72:54:88:b2:43:44:ad:ec: 34:e0:02:02:3e:41:92:0c:51:7e:84:0a:45:01:5c: f9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E8:21:10:72:59:F7:41:7E:04:87:2E:4B:2F:A0:03:0E:34:C8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:63:74:3b:ac:cb:4b:6b:b0:e3:54:6e:25:05:61:d5:af: 62:df:e6:bc:46:63:c0:07:1b:99:85:24:d9:46:02:29:89:57: 70:fd:9f:1f:15:61:30:68:19:60:08:4b:d9:fc:03:79:a7:8f: 40:e3:e4:bf:75:b8:3c:4f:9f:f3:67:e5:72:44:fc:7e:b6:dd: 51:64:62:f6:a0:f5:4c:b2:a6:ee:10:55:d1:fa:cf:a1:2d:86: e3:45:87:94:3b:2a:38:c6:32:60:e0:14:10:08:4f:44:7f:80: 14:78:1a:8a:2e:39:e9:f0:92:87:66:34:44:85:5a:3e:38:b2: 14:63:c1:ae:cb:68:6c:74:94:58:4f:60:c1:01:14:cd:cf:ed: cf:07:4c:e2:78:b4:6e:08:a3:93:34:77:e2:8b:42:60:b3:b3: 0b:28:d3:52:40:46:85:f0:4d:22:f0:a9:61:3b:bd:09:3e:1d: 46:81:f2:35:bd:0c:5e:9b:da:c1:95:49:5d:8d:3c:b5:9d:79: 41:91:17:00:eb:41:fc:af:03:a2:ec:41:6e:c5:9c:f8:bb:eb: 55:2d:ae:48:5e:e5:8e:d5:56:29:df:7c:61:4a:ce:ec:cd:3c: 13:f4:c6:7b:2f:4e:55:f0:59:21:34:d1:5f:73:7f:77:0a:54: f3:88:fb:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37bat8outyNixkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTEyYmJiNjItNTg2Ny00YTljLWEzZWItZmY1OGYxZTExYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g13zVjgaHwM0WyMv3ID+hbUpeFtFEHDp2oH U+XS3G5pWh5Zi6eSCYj/ELde2LD6HvZwdK6wP6QSbzZg4BxL5lu5qExBHNg5sGvk 23mZyezq1iqPLXP3w8R77EIucBWREUvy1tCQMstWqsO9uYsK1pEYyGMYFD5wEucb +50NF+1TXdAXKIg2osLuQsjSeIUvJgdgBoO9I3zSMU8yTQt+kmsR+MslkkTQ33eM /Ry8NoW8ILVO0CjCq3nEDB3KuA8T2xmE66acP457NXq3wj+K8nYNNtkz8/RlTjL2 HCd8qziQX3zGyYULclSIskNErew04AICPkGSDFF+hApFAVz55wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvoIRByWfdBfgSHLksvoAMONMidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI2NjUxZTMtOGJkOS0z MGNmLWI3ZjYtOGIyN2YwY2U1NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuUY3Q7rMtLa7DjVG4lBWHVr2Lf5rxGY8AHG5mFJNlGAimJV3D9nx8V YTBoGWAIS9n8A3mnj0Dj5L91uDxPn/Nn5XJE/H623VFkYvag9Uyypu4QVdH6z6Et huNFh5Q7KjjGMmDgFBAIT0R/gBR4GoouOenwkodmNESFWj44shRjwa7LaGx0lFhP YMEBFM3P7c8HTOJ4tG4Io5M0d+KLQmCzswso01JARoXwTSLwqWE7vQk+HUaB8jW9 DF6b2sGVSV2NPLWdeUGRFwDrQfyvA6LsQW7FnPi761Utrkhe5Y7VVinffGFKzuzN PBP0xnsvTlXwWSE00V9zf3cKVPOI+2Q= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:39 2026 by rpki-client